kernel security, bug fix, and enhancement update

6.12.0-211.40.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

The vulnerability of the mptcp_subflow_init() function in the kernel’s net/mptcp/protocol.c file in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mptcpsubflowinit function in the net/mptcp/protocol.c module of the Linux kernel relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the s32ton() function in the drivers/hid/hid-core.c file of the Linux kernel’s user interface subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the s32ton function in the drivers/hid/hid-core.c module of the Linux kernel’s user interface subsystem relates to an incorrect bitwise shift of a integer value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the build_report() function in the net/xfrm/xfrm_user.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the buildreport function in the net/xfrm/xfrmuser.c module of the Linux kernel is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the rxgk_verify_response() function in the net/rxrpc/rxgk.c module allows attackers to compromise the confidentiality, integrity, and accessibility of protected information within the RxRPC session support of the Linux operating system’s kernel.

The vulnerability of the rxgkverifyresponse function in the net/rxrpc/rxgk.c module, which is part of the RxRPC session support for Linux operating systems, involves the failure to release resources after their useful period has ended. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the smb_lazy_parent_lease_break_close() function in the fs/smb/server/oplock.c module of the Smb subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the smblazyparentleasebreakclose function in the fs/smb/server/oplock.c module of the Smb subsystem of the Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow a remo...

The vulnerability of the smc_tcp_syn_recv_sock() function in the net/smc/af_smc.c module of the SMC protocol family implementation in Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the smctcpsynrecvsock function in the net/smc/afsmc.c module of the SMC protocol family implementation in Linux’s kernel relates to the reutilization of previously freed memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrit...

The vulnerability of the build_polexpire() function in the net/xfrm/xfrm_user.c module, a implementation of kernel networking functions in the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the buildpolexpire function in the net/xfrm/xfrmuser.c module, which is part of the Linux kernel’s networking functions, relates to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the change_page_attr() function in the arch/powerpc/mm/pageattr.c module, which is part of the PowerPC platform support in the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the changepageattr function in the arch/powerpc/mm/pageattr.c module of the PowerPC platform in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the msm_gem_free_object() function in the drivers/gpu/drm/msm/msm_gem.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the msmgemfreeobject function in the drivers/gpu/drm/msm/msmgem.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to state management errors. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the tcf_csum_act() function in the net/sched/act_csum.c module of the network/sched subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tcfcsumact function in the net/sched/actcsum.c module of the network/sched subsystem of the Linux operating system is related to the improper checking of the specified index, position, or offset in the input data. Exploiting this vulnerability may allow an attacker to...

The vulnerability of the alps_rawevent() function in the drivers/hid/hid-alps.c module of the Linux kernel’s device subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the alpsrawevent function in the drivers/hid/hid-alps.c module of the Linux kernel subsystem for user interface devices relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

The vulnerability of the init_amd_zen1() function in the arch/x86/kernel/cpu/amd.c module, which is part of the Linux operating system’s x86 kernel support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the initamdzen1 function in the arch/x86/kernel/cpu/amd.c module, which is part of the Linux operating system’s kernel support for x86 platforms, is related to incorrect inter-process boundary removal of critical data. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the rxrpc_server_keyring() function in the net/rxrpc/server_key.c module, which supports RxRPC session sockets in Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the rxrpcserverkeyring function in the net/rxrpc/serverkey.c module, which supports RxRPC session sockets in Linux operating systems, is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the me2600_xilinx_download() function in the drivers/comedi/drivers/me_daq.c module, which supports devices for collecting data from Linux operating systems. This vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the me2600xilinxdownload function in the drivers/comedi/drivers/medaq.c module, which supports devices for collecting data from Linux operating systems, is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiti...

The vulnerability of the loopback_check_format() function in the sound/drivers/aloop.c module of the Linux kernel’s audio subsystem allows a hacker to access protected information or cause service failures.

The vulnerability of the loopbackcheckformat function in the sound/drivers/aloop.c module of the Linux kernel audio subsystem is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to gain access to...

The vulnerability of the cirrusfb_check_mclk() function in the drivers/video/fbdev/cirrusfb.c driver module allows a hacker to cause a service failure in Linux-based operating systems with kernel-level video buffer devices.

The vulnerability of the cirrusfbcheckmclk function in the drivers/video/fbdev/cirrusfb.c driver for supporting Core Image Buffer devices in the Linux operating system is related to insufficient validation of input data during division by zero. Exploiting this vulnerability could allow an attacke...

The vulnerability of the packet_do_bind() function in the net/packet/af_packet.c module of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the packetdobind function in the net/packet/afpacket.c module of the Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

The vulnerability of the folio_unmap_invalidate() function, located in the mm/truncate.c module of the Linux kernel’s memory management subsystem, allows a attacker to trigger a service failure.

The vulnerability of the foliounmapinvalidate function in the mm/truncate.c module of the Linux kernel’s memory management subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the usbnet_disconnect() function in the drivers/net/usb/usbnet.c module of the Linux kernel’s network adapter driver allows a hacker to cause a service failure.

The vulnerability of the usbnetdisconnect function in the drivers/net/usb/usbnet.c file of the Linux network adapter driver module is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to cause a service failure...